Privacy Policy

Your trading log is about you, and it stays that way. We do not sell your data, we do not share it with brokers, and we do not use it to train models for anyone else. We know exactly what we store because we store as little as possible.

• Account — your email address. That is the whole sign-up. No name, no phone number, no password (we use email sign-in links).
• What you write — your plans, one-line logs, reflections, and the rules you create. This is the product; without it there is no mirror.
• Trades you import — if you upload a broker CSV, we parse it and store the trades it contains (symbol, side, size, price, time, P&L).
• Payment status — whether your subscription is active. We never see or store your card number; the payment provider handles that.
• Basic usage — sign-in timestamps and errors, so we can fix things that break.

• No broker credentials. NoDrift does not connect to your brokerage account. There is no OAuth handshake, no read-only API key, nothing to revoke. Importing a CSV is a file you choose to hand us — and nothing else.
• No device fingerprinting, no ad trackers. We do not run advertising pixels or sell audience data.
• No card numbers. They never touch our servers.

In a managed Postgres database (Supabase). Each account can only read its own rows — enforced at the database level, not just in our application code. Data is encrypted in transit (HTTPS) and encrypted at rest by the hosting provider.

CSV files you upload are parsed on our server and are not retained as files after parsing — we keep the trades, not the upload.

When you use an AI feature (an AI daily review, a report, a plan parse), the relevant excerpt of your own log is sent to our model provider to generate that text. It is used to produce your response — not to train a public model on your trades.

If the AI is unavailable, we tell you plainly instead of quietly substituting a canned reply. You will never be shown machine text that pretends to be a real analysis.

You, and the small number of people who run NoDrift (for support and operations). We do not give access to marketers, brokers, or partners. If we ever need to involve a service provider to run the product (hosting, payment, email, AI), they see only what their job requires, under contract.

We will disclose data if the law compels us to. If that ever happens in a way that affects you, we will say so.

• Export — download everything you have written from Settings, in a readable format.
• Delete — delete your account and its data from Settings. Deletion is real: the records are removed, not flagged and hidden. One exception, stated plainly: feedback you send while signed out is stored without an account, so it cannot be linked to you and cannot be deleted from Settings — email support@nodrift.trade if you want that one removed.
• Stop — cancel anytime from Settings (or by email to support@nodrift.trade); we process it within one business day, and you keep access until the period you paid for ends.

We use only what is needed to keep you signed in (a session cookie). No advertising cookies, no third-party analytics cookies.

NoDrift is a tool for adult traders. It is not directed at anyone under 18, and we do not knowingly collect data from children.

If this policy changes in a way that matters, we will email you before it takes effect. For any question about your data, write to support@nodrift.trade.